On Wed, Jan 22, 2020 at 11:51 PM Patrick Mevzek <[email protected]> wrote:
> On 22/01/2020 17:13, Tony Finch wrote: > > Are there any registries that configure secure delegations from DNSKEY > > records (and do their own conversion to DS records) rather than accepting > > DS records from the registrant? I think I have heard that .de is one. > > CA (IIRC they require both the key and DS, probably to double check the > DS themselves), BE and EU are some example that comes immediately to > mind. There are others. > > Indeed, for .be we expect the registrar to send us the DNSKEY using a <secDNS:keyData> element (when using EPP) https://docs.dnsbelgium.be/be/epp/createdomain.html Maarten Bosteels DNS Belgium
_______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations
